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[edit chassis] Hierarchy Level 



chassis { 
alarm { 

interface-type { 
alarm-name (red | yellow | ignore); 

} 

} 

filter-check days; 
fpc slot-number { 
pic pic-number { 

framing (sdh | sonet); 

no-concatenate; 

} 

> 

(no-source-route | source-route); 
redundancy { 

routing-engine slot-number (master | backup | disabled ); 
ssb slot-number (always | preferred); 

) 

) # End of [edit chassis] hierarchy level 
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[edit class^of-service] Hierarchy Level 



class-of-service {. 
input { 
fpc fpc-number{ 
precedence-map map-name; 

) 

interfaces { 
interface-name ( 
Inet-precedence-map; 
mpls-cos-map; 
unit unit-number { 

output-queue queue-number; 

. ) 
) 

} 

precedence-map map-name { 
bits precedence-bit output-queue queue-number; 

} 

) 

output { 
drop-profile profile-name { 
stream-profile { 

filMevel fill-percentage drop-probability probability-percentage; 

} 

plp-set-queue-proflle { 
filMevet fill-percentage drop-probability probability-percentage; 

} 

. plp-clear-queue-profile { 

filMevel fill-percentage drop-probability probability-percentage; 

) 

) 

fpc fpc-number( 
drop-profile profile-name; 

} 

Interfaces { , 
interface-name { 
transmlt-queues { - 

output-queue queue-number bandwidth percentage; 

) 

weightetf-round-robin ( • 

output-queue que ue-number weight percentage; 

) 

unit unit-number { 
precedence-rewrite { 
output-queue queue-number { 
. pip-clear rewrite-blts precedence-bit, 
pip-set rewrite-bits precedence-bit; 

) 

} * 

} 

} 

} 

} 

policy { 
class class-name [ 
classification-override { 
output-queue queue-number; 

) 

) 

> 

) # End of [edit class-of-servicej hierarchy level 
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[edit firewall] Hierarchy Level 



firewall { 
filter filter-name { 
term term-name { 
from { 

match-conditions ; 



then { 
action ; 

action-modifiers; 

) 

} 

} 

} # End of [edit firewall] hierarchy level 



FIGURE 10 




) 




[edit J brwarding -options] Hierarchy Level 

forwarding-options { 
sampling { 
disable; 
input { 
family inet { 
rate number; 
run-length number; 

) 

) 

output { 
cflowd hostname { 
engine-id idnumber; 
(local-dump | no-local-dump); 
port portnumber; 
version format; 

) 

file { 

filename filename; 
files number, 
size bytes; 
(stamp | nc-rstamp); 
(world-readable | no-world-readable)* 

) 

} 

traceoptions { 
file filename { 
files number; 
size bytes; 

(world-readable | no-world-readable); 

) 

} 

) 

} #End of fedit forwarding-options J hierarchy level 
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[edit groups] Hierarchy Level 

groups { 

group-name { 

configuration-da ta; 

) 

} #End of [edit groupsj hierarchy level 
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[edit interfaces] Hierarchy Level 



interfaces { 
traceoptions { 
file filename <size size> <fj|es number>- 

) 

interface-name { 
disable; 
atm-options { 

vpi vpl-identifier max-vcs vcs-value; 

ilmi; 

) 

clocking clock-source; 
dee; 

description text; 
el-options { 
fcs(32|16); 

framing (g704 | unframedj; 
idle-cycle-flag (flags | ones); 
loopback (local | remote); 
start-end-flag (shared | filler); 
timeslots slot-number; 

} 

e3-options { 
bert-algorithm algorithm; 
bert-error-rate rate; 
bert-period seconds; 
compatibility-mode (digitaWInk | kentrox); 
fes (32 1 16); 
idle-cycle-flag value; 
loopback (local | remote); 
(paytoad-scrambler | rio-payload-scrambler); 
start-end-flag value; 

} 

encapsulation type; 
fastether-options ( 

(loopback | no-loopback); 

source^address-filter { 
njac-address; 

) 

(source-filtering | no-source-filtering)' 

) 

gigether-options { 
flow-control; 

(loopback | no-loopback); . 
source-address-fiiter { 
mac-address; 

) 

(source-filtering | no-source-filtering); 

hold-time seconds; 
link-mode mode; 
mac mac-address; 
mtu bytes; 
no-keepalives; 
no-traps; 
receive-bucket { 
overflow (tag | discard); 
rate speed; 
threshold number; 
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sonet-options ( 
aps{ 

advertise-interval milliseconds; 
authentication-key key;, 
force; 

hold-time milliseconds; 
lockout; 

neighbor address; 

paired-group group-name; 
protect-circuit group-name; 
request; 

revert-time seconds; 
working-circuit group-name; 

} 

bytes { 
ei-qulet value; 
fl value; 
f2 value;- 
si value; 
z3 value; 
24 value; 

) 

fcs (32 1 16); 

loopback (local | remote); 

path-trace trace-string; 

(payload-scrambfer | no-paytoad-scrambler); 

rfc-2615; 

(zCWncrement | no-zO-lncrement); 



speed (10m 1 100m); 
tl-options f . 

buildout (0-133 1 133-266 | 266-399 | 399^32 | 532-655); 

byte-encoding (nx64 | nx56); 

fcs(32|l$); 

framing (sf | esf); ' . 

idle-cycle-flags (flags | ones); 

invert-data; 

line-encoding (ami | bSzsJ; 
loopback (local | remote); 
.start-enoVflag (shared j filler); 
tlmeslots slot-number; 



t3-options ( 

bert-algorithm algorithm; 
bert-error-fate rate; 
bert-perlod seconds; 
(cbit-parity | no-cbit-parity); 

compatibility-mode (digital-link. | kentrox | larscom) <subrate va(ue>; 
fcs (32 1 16); 

(feac-loop-respond | no-feac-loop-respond); 
idle-cycle-flag value; 
(long-build out | no-long-bulldout); 
loopback (local | remote); 
(payload-scrambler | no-payload-scrambler); 
start-end-flag value; 

} 

traceoptions ( 

flag flag <flag-modifier> <disable>; 

) 

transm it-bucket { 

overflow (tag | discard); 
rate speed; 



} 




threshold number; 



vlan-tagging; 

unit logical-unit-number { 

disable; 

dlci identifier, 

encapsulation type; 

inverse-arp; 

multicast-dlci dici-identifier; 

multicast-vci vpNdentifier. vcNdentifter; 

multipoint; 

no-traps; 

oam-liveness { 

up-count cells; 

down-count celts; 

) 

oam-period seconds; 
point-to-point; 
shaping { 

(cbr rate | vbr peak rate sustained rate burst length); 
queue-length number; 



tunnel { 
source address; 
destination address; 
ttl number; 

} 

vci vpNdentifier.vcNdentlfler; 
vlan-id number; 
family family [ 
filter { 

input filter-name; 

output fl/ter-name; 

group fifter-group-number; 

} 

mtu size; 
multicasts-only; 
no-redirects; 
primary; 

address address { 
arp Ip-address mac mac-address <publish>; 
destination address; 



inverse-arp; 
oam-liveness { 

up-count cells; 

down-count cells; 

} 

oam-period seconds; 
shaping { 

(cbr rate | vbr peak rate sustained rate burst length); 
queue-length number; 

} 

vci vpHdentifier. vci-identifier; 



} 




broadcast address; 



(dlci dici-identifier I vci vcNdentifier); 



) 

primary; 
preferred; 
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vrrp-group group-number { 
virtual-address [ addresses ); 
priority number; 
advertise-interval seconds; 
authentication-type authentication; 
authentication-key key; 
(preempt | no-preempt); 
track { 

interface interface-name priority-cost cost; 

} 



) 

) 

} 

) 

} # End of [edit interfaces] hierarchy level 




[edit policy~options] Hierarchy Level 



policy-options { 
as-path name regular-expression', 
community name members [ community-ids J; 
damping name { 
disable; 

half-life minutes; 
max-suppress minutes; 
reuse- number; 
suppress number; 

) 

policy-statement policy-name { 
term term-name { 
from { 

match-conditions; 

route-filter destination-prefix match-type <actions>; 
prefix-list name; 

} 

to{ 

match-conditions ; 

} 

then actions; 

} 

} 

prefix-list name { 
ip-addresses; 
) . 

} # End of [edit policy-options] hierarchy level 




t 



[edit protocols] Hierarchy Level 



protocols { 



BGP 



bgp{ 



advertise-inactive; 
authentication-key key; 
cluster cluster-Identifier; 
damping; 

description text-description; 
disable; 

export [policy-name]; 
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family inet { 
(any | unicast | multicast) ( 
prefix-limit { 

maximum number, 
teardown <percentage>; 



) 

} 

hold-time seconds; 

import [policy-name]; 

keep (alt | none); 

local-address address; 

local-as autonomous-system <private>; 

local-preference local-preference ; 

log-updown; 
metric-out metric; 
multihop <ttl-value>; 
nc-aggregatorid; 
no-client-reflect; 
out-delay seconds; 
passive; 

path-selection (cisconon<leterministic | atways-compare-med); 

peer-as autonomous-system; 

preference preference; 

remove-private; 

traceoptions { 

file name <replace> <size slze> utiles number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <fiag-modifier> <disable>; 

) 

group group-name { 
advertise-inactive; 
allow [netwonVmasklen]; 
authentication-key key; 
cluster cluster-identifier; 
damping; 

description text-description; 
export [policy-name]; 
family inet { 
(any | unicast | multicast) { 
prefix-limit { . 

maximum number; 
teardown <percentage>; 

} 

) 

} 

hold-time seconds ; 

import [policymame); 

keep (all | none); 

local-address address; 

local-as autonomous-system <private>; 

local-preference local-preference ; 

logHJpdown; 

metric-out metric; 

multihop <ttl-value>; 

multlpath; 

no-aggregator-id; 

nc-client-refiect; 

out-delay seconds; 

passive; 

peer-as autonomous-system; 
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preference preference; 
protocol protocol; 
remove-private; 
traceoptions { 

file name <replace> <size size> <files number* <no-stamp> 

<(wortd-readable | no-world-readable)>; 
flag flag <flag-modifter> <disable>; 



type type; 
neighbor address { 

advertise-inactive; 

authentication-key key; 

cluster cluster-identifier; 

damping; 

description text-description; 
export [policy-name]; 
family inet { 

(any | unicast | multicast) { 
prefix-limit { 
maximum number; 
teardown < percentages 

) 

> 

) 

hold-time seconds; 

import policy-name; 

keep (all | none); 

local-address address; 

local-as autonomous-system <private>; 

local-preference local-preference; 

log-updown; 

metric-out metric; 

multihop <W-value>; 

multipath; 

no-aggregator-id; 

no-client-reflect; 

out-delay seconds; 

passive; 

peer-as autonomous-system; 
preference preference; 
protocol protocol; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no^world-readable)^ 
flag flag <flag-modifier> <disable>; 



} # End of [edit protocols bgp] hierarchy level 



FIGURE 




Connections connections { 

interface-switch connection-name { 
interface interface-name. unit-number, 
interface interface-name, unit-number, 

} 

Isp-switch connection-name { 
transmit-lsp label-switched-path ; 
receive-lsp label-switched-path; 

> 

remote-interface-switch connection-name { 
interface interface-name. unit-number, 
transmit-tsp label-switched-path; 
receive-lsp label-switched-path; 

} 

} # End of [edit protocols connections] hierarchy level 

DVMRP dvmrp { 

disable; 

export [ policy-names }; 
import [ policy-names ); 
rib-group group-name; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

interface interface-name { 
disable; 

hold-time seconds; , 
metric metric; 

) 

} # End of [edit protocols dvmrp] hierarchy level 

IGMP igmpf 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

> 

query-interval seconds; 
query-last-member-interval seconds; 
query-response-interval seconds; 
robust-count seconds; 
interface interfac&name { 
disable; 

version seconds; 

} 

) # End of [edit protocols igmp] hierarchy level 

IS-IS isis { 

disable; 

authentication-key key; 
authentication-type authentication; 
export [ policynames J; 
level level-number { 

authentication-key key; 

authentication-type authentication ; 

external-preference preference ; 

preference preference; 

wide-metrics-only; 

} 
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Isp-lifetime seconds; 
no-authentication-check; 
overload <timeout seconds>; 
reference-bandwidth reference-bandwidth; 
traffic-engineering { 

disable; 

shortcuts; 

) 

traceoptlons { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <ftag-modifier><d\s3b\e>; 

} 

interface interface-name { 
disable; 

csnp-interval seconds; 
hello-authentication-key key: 
hello-authentication-type authentication; 
Isp-interval milliseconds; 
rnesh-group {value | blocked); 
-passive; 

level level-number { 
disable; 

hellonauthenticatfon-key key. 
heilo-authentlcatlon-type authentication; 
hello-Interval seconds; 
hold-time seconds; 
metric metric; 
passive ; 
priority priority; 
te-metric metric; 

) 

} # End of [edit protocols islsj hierarchy level 

LDP ldp{ 

interface interface-name { 
disable; 

hello-interval seconds; 
hold-time seconds; 

} 

keepa live-interval seconds;. 
keepalive-timeoiit seconds; 
preference preference; 
traceoptlons { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

) 

) # End of [edit protocols Jdp] hierarchy level 

MPLS mpls { 

disable; 

no-propagate-ttl; 
admin-groups { 

group-name group-value; 

) 

log-updown ( 

(syslog | no-syslog); . 
(trap | no-trap); 
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optimize-aggressive; 
path path-name { 
disable; 

address <strict | loose>; 

} 

statistics { 

file filename size size files number <no-stamp>; 
interval seconds; 

) 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-wor!d-readakle)>; 
flag flag < flag-modi fier> <disable>; 



traffic-engineering (bgp | bgp-igp); 
label-swttched-path Isp-path-name { 
disable; 
to address; 
from address; 
adaptive; 
admin-group { 

include [ group-names J; 
exclude [ group-names ]; 

} 

bandwidth bps; 

class-of-servlce class-of-service ; 
fast-reroute { 

bandwidth bps; 

hop-limit number, 

include group-names; 

exclude group-names ; 

} 

hop-limit number; 
Idp4unnellng; 
metric metric; 
no-cspf; 

nc-decrement-ttl; 
optimlze-timer seconds; 
preference preference; 
priority setup-priority hold-priority; 
(random | least-fill | most-fill); 
(record | no-record); 
retry-! imit number; 
retry-timer seconds; 
standby; 

primary path-name { 
adaptive; 
admin-group { 

include [ group-names ]; 
exclude { group-names J; 

> 

bandwidth bps; 

class-of-service class-of-service; 

hop-limit number; 

nc-cspf; 

optimize-tlmer seconds; 

preference preference; 

priority setup-priority hold-priority; 

(record | no-record); 

standby; 



} 
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secondary path-name { 
adaptive; 
admin-group { 

include group-names; 

exclude group-names; 

> 

bandwidth bps; 

class-of-service ciass-of-service; 

hop-limit number; 

no-cspf; 

optimize-tirner seconds; 

preference preference; 

priority setup-priority hold-priority; 

(record | no-record); 

standby; 



install { 

destination-prefix/prefix-length <active>; 

} 

} 

interface (interface-name | all) { 
disable; . 
admin-group { 
group-name; 



(nexthop (address | interface-name | address/interface-name)) | (reject | discard) 
(pop | (swap <out-label>); 
class-of-service class-of-service; 
preference preference; 



static-path inet { 
prefix { 

nexthop (address \ interface-name | address/interface-name); 
push out-label; 

class-of-service class-of-service ; 
preference preference; 

} 

) # End of [edit protocols mpls] hierarchy level 

msdp ( 
disable; 

export [ policynames ); . 
import [ policynames ); 
rib-group group-name; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <fiag-modifter> <disable>; 



peer address { 
disable; 

local-address address; 
export [ policy-names ]; 
import ( policy-names ]; 
traceoptions ( 

file name <replace> <size size> <files number> <no-stamp> 
<(world-readable | no-world-readable)>; 



label-map in-label { 



type type; 



) 
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flag flag <f lag-modi fie r> <disable>; 

} 

■ ) 

group group-name { 

disable; 

export f policy-names ]; 
import [ policynames J; 
local-address address; 
traceoptions { 

file name <replace> <size s'tze> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

I - • . - 

peer address; { 

disable; 

export [ policy-names ]; 
import [ policy-names J; 
locataddress address ; 
mode <(mesh-group | standard)>; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | noworld-readable);*; 
flag flag <flag-modifier> <dlsable>; 

} 

) 

) 

} #End of [edit protocols rnsdpj hierarchy level 

OSPF ospf{ 

disable; 

export I policynames ]; 
external-preference preference: 
preference preference; 
reference-bandwidth reference-bandwidth; 
traffic-engineering.{ 

no-topology; 

shortcuts; 

) 

traceoptions { . 

file name <replace> <slze size> <files number- <no-stamp> 

<{world-readable | no-world-readable)>; 
flag flag <flagmodifier> <dlsable>; 

) 

area area-Id { 

area-range network/masklen <restrict>; 
authentication-type authentica Hon ; 
Interface interface-name { 
disable; 

authentication-key key <key-ld identifier*; 
.dead-interval seconds; 
hello-Interval seconds; 
interface-type type; 
metric metric; 

neighbor address <eligible>; 
passive; 

poll-interval seconds; 
priority priority; 
retransmit-interval seconds; 
transit-delay seconds; 
transm it-interval seconds; 

) 
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nssa { 

area-range network/ maskien <restrict>; 
default-metric metric, 
(summaries | no-summaries); 

} 

stub <defau It-metric metric> <(summaries | no-summaries)> 
virtual-link neighbor-id router-id transit-area area-id { 
disable; 

authentication-key key <key-id identifier; 
dead-interval seconds; 
hello-interval seconds; 
retransmit-interval seconds; . 
transit-delay seconds; 

) 

) 

} # End of [edit protocols ospfj hierarchy level 

PIM pirn { 

disable; 
dense-groups { 
addresses; 

) 

rib-group groupname; 
traceoptions { 

file name <replace> <size size> <f\\es number> <no-stamp> 

<(world-readab!e | no-world-readable)>; 
flag flag <ftag-modifier> <disable>; 

} 

interface interface-name { 
disable; 

mode (dense | sparse | sparse-dense); 
priority number; 
version version; 

) 

rp{ 
local { 
disable; 

address address; 
group-ranges { 
destination-mask; 

} 

hold-time seconds; 
priority number; 

} 

auto-rp (announce | discovery | mapping); 
bootstrap-priority number; 
static { 
address address { 
version version; 
group-ranges { 
destina tion-mask; 

} 

) 

} 

} 

) # End of [edit protocols pirn] hierarchy level 

RIP rip ( 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 
<( world-readable | no-world-readable)>; 
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flag flag <flag-modifier> <disabie>; 

) 

authentication-key password; 
authentication-type type; 
(check-zero [ no-check-zero); 
import [policy]; 
message-size number; 
metric-in metric ; 
receive receive-options; 
send send-options; 
group group-name { 
export [policy]; 
metric-out metric; 
preference preference; 
neighbor neighbor-name { 
authentication-key password; 
authentication-type type; 
(check-zero | no-check-zero); 
import [policy]; 
message-size number; 
metric-in metric; 
receive receive-optlons; 
send send-options; 

} 

] 

} # End of [edit protocols ripj hierarchy level 



Router Discovery 



RSVP 



} 



router-discovery ( 
. disable; 
traceoptions { 

file /ra/T7e<replace> <slze size> <fiies number> <no-stamp> 

<(worfd-readabie | no-world-readable)>; 
fag flag <flag~modifter> <disable>- 

i 

interface interface-name { 

m in-advertisement-interval seconds ; 
max-advertisement-iritervai seconds; 
lifetime seconds; 

} 

address address { 
(advertise | ignore); 
(broadcast | multicast); 
(priority priority I ineligible); 

) 

# End of [edit protocols router-discovery) hierarchy level 



rsvp( 
disable; 

keep-multiplier number; 
refresh-time seconds; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>- 

J 

interface interface-name { 
disable; 

(aggregate | no-aggregate); 
authentication-key key; 
bandwidth bps; 
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hello-interval seconds; 
subscription percentage; 

) 

} # End of [edit protocols rsvpj hierarchy level 

SDP/SAP sap { 

disable; 

listen <address> <port port>; 
) # End of [edit protocols sap] hierarchy level 



VRRP traceoptions { 
flag flag; 

) # End of [edit protocols vrrp] hierarchy level 
) # End of [edit protocolsj hierarchy level 
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[edit routing-instances] Hierarchy Level 



[edit] 

routing-instances routing-instance-name { 
interface interface-name; 
protocols { 
ospf { 

ospf-configuration; 

} 

> 

routing-options { 
aggregate ( 
defaults { 

(active | passive); 

as- path <as-path> <origin (egp | igp | incomplete | npne)> <atomic-aggregate> 

oggregator as-number in-acldress>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

autonomous-system autonomous-system <loops number>; 

confederation confederation-autonomous-system members autonomous-system; 

fate-sharing { 

group group+iame; 

cost value; 

from address [to address]; 

) 

forward ing-table { 

export [ policynames J; 

) 

generate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

<aggregator as-number in-address>; 
community ([ community-ids J | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 



(tag | tag2) string; 
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interface-routes { 
rib-group routing-table-name; 

) 

martians { 

destination-prefix match-type <allow>; 

} 

multicast { 
scope scope-name { 

interface interface-name; 
prefix destination-prefix; 

} 

} 

options { 
syslog (level tevel \ upto level); 

} 

rib routing-table { 
aggregate { 
defaults { 

{active | passive); 

as-path <as-path> <origin (egp | igp | Incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ) | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

generate { 
defaults { 
. (active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids J | no-advertise | no-export | no-export-subconfed | none); 
(full. | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

martians { 

destination-prefix match-type <allow>; 
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static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag |.tag2) string; 

) 

route destination-prefix { 
. policy poiicymame]; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] \ no-advertise | no-expbrt | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

) 

rib-groups { 
groupname { , 
import-rib [ group-name ]; 
export-rib group-name ; 

) 

) 

route-record; 
router-id address ; 
static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric j metric2 | metric3 | metric4) value; 
(preference | preference2 | color | co!or2) preference; 
(readvertise | no-readvertise);. 
(no-retain | retain); 
(tag | tag2) string; 

} 

traceoptions ( 

file name <replace> <size size> <files number> <no-stamp> 
<(world-readable | no-world-readable)>; 
flag flag <flag-mod\fier> <disable>; 

} 

} 
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[edit routing-options] Hierarchy Level 



routing-options { 
aggregate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | nc-export | no^export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

> 

route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as~path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in~address>; 
community ([ community4ds ) | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); . 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

} 

autonomous-system autonomous-system <loops number>; 

confederation confederation-autonomous-system members autonomous-system; 

forwardlng-table { 

export [ pollcy^ames J; 



generate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | Incomplete | rione)> <atomic-aggregate> 

oggregator as-number in-address>; 
community (( communityJds ) | no-advertise | no-export | nchexport-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference { preference^ | color | color2) preference; 
(tag | tag2) string; 



route destinatlon-prefix'[ 
policy policyname; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number iri-address>; 
community ([ community4ds J | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 
) . 

) 

interface-routes ( 

rib-group routing-table-name; 

) 

martians ( 

destination-prefix match-type <allow>; 

) 



} 




multicast { 

scope scope-name [ 

interface interface-name; 
prefix destination-prefix; 

} 

} 

options { 

syslog (level level | upto level); 

) 

rib routing-table { 
static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete |.none)> <alomic-aggregate> 

<aggregator as-number in-address>; 
community ({ community-ids ) | no-advertise | no-export | no-export-subconfed | none); 
(install | norinstall); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no+eadvertise); 
(no-retain | retain); 
(tag | tag2) string; 



route destination-prefix { 
next-bop; 
(active | passive); 

as-path <as~path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 



community ([ communftyids } | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 |/netric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); . . 
(ncH-etain | retain); 
(tag | tag2) string; 



defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community (( community-ids )] no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 



route destination-prefix { 
policy policy-name; 
(active | passive); . 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | nc-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 



) 



oggregator as-number ln-address>; 



} 

aggregate { 




generate ( 
defaults { 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ communityids J | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value: 
(preference | preference2 | color | color2) preference: 
(tag | tag2) string: 

J 

route destination-prefix { 
policy policy-name: 
(active f passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

<aggregator as-number in-address>; 
community ([ community-ids J | no-advertise (no-export | no-exports ubconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value: 
(preference | preference2 | color | color2) preference: 
(tag | tag2) string: 

} 

} 

martians ( 

destination-prefix match-type <allow>; 

) 

) 

rib-groups ( 
group-name { 

import-rib f group-name J; 
exportrib group-name; 

J 

} 

router-Id address; 
static { 
defaults ( 

(active | passive) ; 

as-path of-path* <orlgin (egp | Igp | incomplete | none)> <atomlc-aggregate> 

oggregator as-number in-address>; ' ' 
community (( community-ids J | no-advertlse | no-export | no-export-subconfed | none); 
(install | no-install); 

{metric | metric2 | metric3 | metric^) value; 
(preference | preferertce2 f color | color2) preference; 
(readvertise | no-readvertlse); 
(no-retain | retain); 
(tag | tag2) string; 

.) 

route destination-prefix ( 
next-hop; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomiCnaggregate> 

oggregator as-number in-address>; 
community ([ commuhityids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metrlc2 | metric3 | metric4) value; 
(preference | preference2 | color | polor2) preference; 
(readvertise | no-readvertise); 

(no-retaln | retain); FIGURE 1 7C 

(tag | tag2) string; 

) 

) 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readabte)>; 
flag fiag-<flagmodifJer> <disable>; 

) 

) # End of [edit routing-options J hierarchy level 



[edit sntnpj Hierarchy Level 



snmp { 

description description; 
location location; 
contact contact; 
interface ( interface-names ]; 
community community-name { 
authorization authorization; 
clients { 
default restrict; 
address <restrict>; 

} 

} 

trap-group group-name { 
categories category; 
targets { 
address; 

} 

version version; 



traceoptions { 

file <files numbeo <size size>; 
.flag flag <disable>; 

} 

} # End of [edit snmpj hierarchy level 
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} 




[edit system] Hierarchy Level 



system { 

authentication-order [ authentication-methods J; 
backup-router address destination destination-address>; 
compress-configuration-files; 
default-address-selection; 
dhcp-refay (server address | disable); 

diag-port-authentication (encrypted-password "password" | plaintext-password) ; 
domain-name domain-name; 
doma in-sea rcfi [domain-list); 
host-name hostname; 
location ( 
altitude feet; 

country-code code; 

hcoord horizontal-coordinate; 

lata service-area; 

latitude degrees; 

longitude degrees; 

npa-nxx number, 

postal-code postal-code; 

vcoord vertical-coordinate; 

login { 

message tort; 
cfass class-name { 

aliow-commands "regular-expression" ; 

deny-commgnds "regular-expression"; 

Idletfmeout minutes: 

permissions ( permissions }; 

J 

user user-name { 

full-name complete-name; 
ufd ufoWalue; 
class class-name; 
authentication f 

(enciypted-password "password" | plain-text-password); 
ssh-rsa "public-key*; 

) 

} 

> 

name-server.{ 
address; 
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ntp( 



authentication-key key+iumbertype type value password; 
boot-server address; 
broadcast <address> <key key-number> <version value> <ttl value>; 
broadcast-client; 
multicast-client <address>; 

peer address <key key-number> <version value> <prefer>; 
server address <key key-number> <version value> <prefer>; 
trusted-key [keynumbers J; 

} 

ports ( 
auxiliary { 
insecure; 
speed baud-rate; 
type terminal-type; 

J 

console { 
insecure; 
speed baud-rate; 
type terminal-type; 



) 

} 

processes f 

inet-process (enable | disable); 
interface-control (enable | disable);, 
mib-process (enable | disable); 
ntp (enable | disable); 

routing (enable | disable); 
snmp (enable | disable); 

watchdog (enable | disable) <timeout seconds>; 

) 

radius-server server-address { 
port number; 
retry number; 
secret password; 
timeout seconds; 

) 

root-authentication { 

(encrypted-password "password" | plaln-text-password); 
ssh-rsa m pubtiokey* ; 

) 

services { 

finger <connection-limft limit* <rate-limit limit>; 
ssh <connectiorMimit limit* <rate-limlt timit>; 
telnet <connection-limlt Iimlt> <rateHlmlt iimft>; 

) 

static-host-mapping ( 
host-name { 
Inet [ address ]; 
sysid system-identifier; 
alias [ alias ]; 

) 

) 

sysiog( 

file filename { 
facility level; 
archive { 
files number; 
size size; 

.(world-readable | no^vorld-readable); 

} 

) 

host hosfname { 
facility level: 
facility-override facility, 
log-prefix string; 

} 

user (username | *) { 
facility level; 

) 

console { 
faclfity level; 

) 

archive { 
files number; 
size size; 

(world-readable | no-world-readable); 

) 

} 

tacplus-server server-address { 
secret password; 
single-connection; 
timeout seconds; 

) 

time-zone time-zone; 
)} # End of [edit system] hierarchy level 
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